Published: 31/12/2004 Updated: 14/02/2024

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

EarlyImpact ProductCart uses a weak encryption scheme to encrypt passwords, which allows remote malicious users to obtain the password via a chosen plaintext attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
netsourcecommerce productcart

source: wwwsecurityfocuscom/bid/9669/info EarlyImpact ProductCart is reportedly prone to multiple vulnerabilities The specific issues include SQL injection, cross-site scripting and cryptographic weaknesses These issues could expose sensitive data such as user credentials and allow for execution of hostile script code and HTML These is ...

CWE-326 http://archives.neohapsis.com/archives/fulldisclosure/2004-02/0871.html http://www.securityfocus.com/archive/1/354288 http://archives.neohapsis.com/archives/bugtraq/2004-02/0503.html http://www.s-quadra.com/advisories/Adv-20040216.txt http://www.securityfocus.com/bid/9669 http://www.earlyimpact.com/productcart/support/updates/ReadMe_ProductCart_Security_Patch_013004.txt http://www.osvdb.org/3979 http://securitytracker.com/alerts/2004/Feb/1009085.html http://secunia.com/advisories/10898 https://exchange.xforce.ibmcloud.com/vulnerabilities/15231 https://nvd.nist.gov https://www.exploit-db.com/exploits/23702/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2004-2172

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect